Skip to content
SheetRank

Privacy Policy

Last updated: October 4, 2026

1. Information We Collect

We collect information you provide directly: email address, name, university or firm affiliation, onboarding responses, and model submission data for grading purposes. If you verify a student email for the Pro student discount, we also collect that .edu address.

2. How We Use Information

We use your information to provide the Service, calculate leaderboard rankings, improve grading accuracy, process payments and student discount verification, and communicate about your account. Enterprise customers may receive aggregated cohort analytics.

3. Service Providers

We share information with the following categories of service providers, only as needed for them to perform their function:

  • Supabase: authentication and database hosting. If you sign in with Google or LinkedIn, we receive your basic profile information as permitted by those providers.
  • Stripe: payment processing for Pro subscriptions. Stripe receives your payment card details directly; we do not receive or store your full card number. See Stripe's Privacy Policy for how they handle payment data.
  • Resend: delivery of transactional email, including student email verification links. We share the email address being verified with Resend solely to send that message.
  • Sentry: error monitoring, so we can detect and fix failures (for example, in grading or billing) before they affect you. It runs both on our servers and in your browser. Sentry receives error details such as stack traces and the route where an error occurred; for some server-side errors, it also receives your internal account ID (not your name or email) so we can investigate an issue specific to your account. We configure Sentry to not attach other personal data by default — your IP address, cookies, or request headers are not sent alongside an error report. See Sentry's Privacy Policy for how they handle this data.

4. Classroom & Cohort Data

SheetRank has two separate ways an instructor can run a class, and each shares a different, limited slice of student data with that instructor.

Self-serve classes. Any account can create a class after verifying a .edu email, and students join it themselves with a one-time code the instructor shares — no LMS connection required. Once a student joins, that class's instructor can see: the student's name, email address, and aggregate platform activity (deals passed, submission status by challenge, and Academy course progress). If the instructor opens a specific submission to review it (for example, to respond to a flagged answer), they can also see that submission's actual spreadsheet content and grading detail, and may leave a private note on it visible only to instructors of that class. Contact us at privacy@sheetrank.com to be removed from a class.

LMS-connected classes (LTI 1.3). If your professor or institution instead connects SheetRank to their Learning Management System (e.g. Canvas, Blackboard, or Moodle), two additional data flows apply, both limited to what's needed to run the class:

  • Roster sync (Names and Role Provisioning Service). When an instructor launches a linked assignment, we request the course roster from the LMS and use it to provision each actively enrolled student into that class inside SheetRank: name, email address, the LTI-issued identifier for that student, and course role (student or instructor). Students whose enrollment the LMS reports as inactive or dropped are not provisioned.
  • Grade passback (Assignment and Grade Services). Scores earned on assignments are sent back to the LMS gradebook, tied to the same LTI-issued identifier the platform already uses for that student. We do not send model content, spreadsheet submissions, or anything beyond the numeric score.

Classroom and cohort data (from either path) is retained under the same policy as the rest of your account (Section 5, below); we do not currently apply a separate retention schedule to it. If your institution requires a formal data processing agreement or has specific requirements around student records, contact us at privacy@sheetrank.com before connecting LTI or running a class through SheetRank.

5. Data Storage & Retention

Account data and model submissions are stored on secure cloud infrastructure. We retain data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we delete or anonymize your personal data within a commercially reasonable time, except where retention is required for legal, tax, or accounting purposes.

6. Sharing

We do not sell your personal information. We share data only with the service providers described above, or when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you if your information becomes subject to a different privacy policy).

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting privacy@sheetrank.com. We will respond within the time required by applicable law.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, request its deletion, correct inaccurate information, and opt out of any "sale" or "sharing" of personal information as those terms are defined under California law. We do not sell your personal information for money. We will not discriminate against you for exercising these rights.

If you are in the European Economic Area or UK, the GDPR gives you the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing is generally your consent, our need to perform our contract with you (providing the Service you signed up for), or our legitimate interests in operating and improving the Service.

8. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 13. If you believe a child under 13 has provided us personal information, contact us at privacy@sheetrank.com and we will delete it.

9. Cookies & Analytics

We use essential cookies for authentication and session management (including short-lived UI hint cookies that only indicate whether you appear signed in and whether your plan is Pro, so the navigation can render correctly), and Stripe may set cookies during checkout for fraud prevention. We do not use third-party advertising cookies.

We also use Vercel Analytics and Vercel Speed Insights to understand aggregate traffic and page performance (for example, which routes are visited and how long pages take to load). We record a small set of product events — such as completing a free deal, finishing onboarding, starting checkout, or completing a subscription — so we can improve the product and measure conversion. These tools run in the browser and/or on our servers and may process technical data such as page URLs, approximate location derived from IP, and device/browser characteristics. See Vercel's Privacy Policy for how they handle this data.

10. Contact

Questions about this policy? Email privacy@sheetrank.com.

Terms of Service